+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [0-Day] Apple Keychain Vulnerability - Mac OSX and iOS (/showthread.php?tid=4869816)
Apple Keychain Vulnerability - Mac OSX and iOS - cyberducky - Jun 17, 2015
Apple was quiet for six months without any idea of the huge vulnerability that left 88% of iDevices and Macs "completely exposed" to attacks.
Here is a video demonstrating the attack:
Link to the article about the vuln:
http://www.theregister.co.uk/2015/06/17/apple_hosed_boffins_drop_0day_mac_ios_research_blitzkrieg/
* - Deany - Jun 17, 2015
Wow, Abide doing big things. Pls donut hack me sir.
* - cyberducky - Jun 17, 2015
(Jun 17, 2015 08:59 PM)Japanese Wrote: Wow, Abide doing big things. Pls donut hack me sir.
It is insane that a huge corporation like Apple went THAT LONG without a clue there was a problem.
* - Katana - Jun 17, 2015
Exactly, who knows, after apple's so many messups, there are probably more exploits out there.
* - Deany - Jun 17, 2015
(Jun 17, 2015 09:05 PM)iOS8 Wrote: Exactly, who knows, after apple's so many messups, there are probably more exploits out there.
How do you have a 100% warning level? 😯
* - Katana - Jun 17, 2015
(Jun 17, 2015 09:05 PM)Japanese Wrote: How do you have a 100% warning level? 😯
Very few can withstand this much of a power level.
* - cyberducky - Jun 17, 2015
I also forgot to mention, thanks zYMPTOM for showing me this article.
* - w34k - Jun 18, 2015
It's not the first time a vulnerability within OS X has gone that long without being noticed. You think months is bad ? How about years for the recent exposed Rootpipe exploit ? I believe there are many vulnerabilities within OS X. It's just a matter of time before someone finds them and decides to come out about it.
PoC of the Rootpipe exploit.
https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x
* - cyberducky - Jun 18, 2015
(Jun 18, 2015 12:56 AM)w34k Wrote: It's not the first time a vulnerability within OS X has gone that long without being noticed. You think months is bad ? How about years for the recent exposed Rootpipe exploit ? I believe there are many vulnerabilities within OS X. It's just a matter of time before someone finds them and decides to come out about it.
PoC of the Rootpipe exploit.
https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x
Of course it's not the first, but it's weiird that after the first iCloud breach, they haven't monitored it still. iCloud has been a target, but iCloud hasn't been a focus for their sec team.